Managing Kerberos and Other Authentication Services in Oracle^® Solaris 11.3

How to Configure Thunderbird to Use Your Smart Card for Signing and Encrypting Emails

In this procedure, you configure Thunderbird to encrypt and sign emails with the certificate from your smart card.

Before You Begin

You have completed How to Download Smart Card Certificates for Web and Email Use.

1. Download the certificates for this application only.
2. Insert your CAC smart card.

   The green light should flash.

3. Add the CAC module to Thunderbird as a security device.
   1. From the Thunderbird Preferences Menu, navigate to the Advanced Section, Certificates tab, click the Security Devices button, then the Load button.
   2. Type "CAC Module" as the module name and browse to the appropriate CAC module.

      • For CACKey, select /usr/lib/libcackey.so.

      • For Coolkey, select /usr/lib/libcoolkeypk11.so.

   Thunderbird can now read the client certificates from your CAC card.

4. In Thunderbird, test your configuration by sending an email to yourself.

   When composing the email message, pull down the Security menu and choose "S/MIME Sign" and "S/MIME Encrypt" before sending the message.